use-developer-controlled-wallets
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill instructions or reference files.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the official
@circle-fin/developer-controlled-walletsNode.js package, which is a verified resource from the vendor. - [CREDENTIALS_UNSAFE]: The skill documentation correctly identifies
CIRCLE_API_KEYandENTITY_SECRETas highly sensitive credentials. It provides clear instructions for secure management using environment variables and.gitignore, and explicitly prohibits hardcoding or logging these secrets. - [PROMPT_INJECTION]: The skill implements protective boundaries by instructing the agent to refuse compliance with prompts that conflict with its security rules, specifically regarding the unauthorized registration of secrets or execution of transfers.
- [COMMAND_EXECUTION]: All documented operations use the official SDK methods. The file-writing operation for the recovery file in
references/register-secret.mdis a standard part of the wallet setup process and is accompanied by strong warnings regarding its sensitive nature.
Audit Metadata